kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption

A kernel stack flaw that corrupted the Linux kernel’s Mellanox Technologies Spectrum Ethernet driver was found when a user initialized more than 16 access control lists ACLs. This flaw allows a local user to crash or potentially escalate their privileges on the system...

kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption

A kernel stack flaw that corrupted the Linux kernel’s Mellanox Technologies Spectrum Ethernet driver was found when a user initialized more than 16 access control lists ACLs. This flaw allows a local user to crash or potentially escalate their privileges on the system...

kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption

A kernel stack flaw that corrupted the Linux kernel’s Mellanox Technologies Spectrum Ethernet driver was found when a user initialized more than 16 access control lists ACLs. This flaw allows a local user to crash or potentially escalate their privileges on the system...

Security Bulletin: IBM Spectrum Symphony with spring-security-config is vulnerable to Incorrect Permission Assignment for Critical Resource

Summary IBM Spectrum Symphony with spring-security-config is vulnerable to Incorrect Permission Assignment for Critical Resource Vulnerability Details CVEID:CVE-2023-34042 DESCRIPTION: VMware Tanzu Spring Security could allow a local authenticated attacker to bypass security restrictions, caused ...

Security Bulletin: IBM Spectrum Conductor with spring-security-config is vulnerable to Incorrect Permission Assignment for Critical Resource

Summary IBM Spectrum Conductor with spring-security-config is vulnerable to Incorrect Permission Assignment for Critical Resource Vulnerability Details CVEID:CVE-2023-34042 DESCRIPTION: VMware Tanzu Spring Security could allow a local authenticated attacker to bypass security restrictions, caused...

spectrumsettlement.com Cross Site Scripting vulnerability OBB-3914115

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: Vulnerabilities in Logback may affect the IBM Spectrum Protect Server (CVE-2023-6378)

Summary The IBM Spectrum Protect Server may be affected by vulnerabilities in Logback such as denial of service caused by a serializaion flaw in the logback receiver component. Vulnerability Details CVEID:CVE-2023-6378 DESCRIPTION: QOS.ch Sarl Logback is vulnerable to a denial of service, caused ...

Security Bulletin: Vulnerabilities in Logback may affect the IBM Spectrum Protect Server (CVE-2023-6481)

Summary The IBM Spectrum Protect Server may be affected by vulnerabilities in Logback such as denial of service caused by a serializaion flaw in the logback receiver component. Vulnerability Details CVEID:CVE-2023-6481 DESCRIPTION: QOS.ch Sarl Logback is vulnerable to a denial of service, caused ...

Security Bulletin: Vulnerability in Axios might affect IBM Spectrum Sentinel Anomaly Scan Engine (CVE-2023-45857)

Summary Vulnerabilities in axios might affect IBM Spectrum Sentinel Anomaly Scan Engine. Vulnerabilities include allowing remote attacker to perform cross-site scripting attacks, Web cache poisoning and other malicious attacks. Vulnerability Details CVEID:CVE-2023-45857 DESCRIPTION: Axios is...

Security Bulletin: Vulnerabilities in Spring, Tomcat, Jackson, sudo, and Linux kernel can affect IBM Spectrum Protect Plus

Summary IBM Spectrum Protect Plus can be affected by vulnerabilities in Spring, Tomcat, Jackson, sudo, and Linux kernel. Vulnerabilities include obtaining sensitive information, gaining elevated privileges, executing arbitrary commands, denial of service, and bypassing security restrictions, as...

The vulnerability of the Spectrum service for ArubaOS operating systems allows a intruder to trigger a service failure.

The vulnerability of the Spectrum service for ArubaOS is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a service failure using the PAPI protocol...

The vulnerability of the mlxsw_sp_acl_tcam_init() function in the drivers/net/ethernet/mellanox/mlxsw/spectrum_acl_tcam.c file of the Mellanox network card driver for the Linux operating system allows a attacker to cause a service failure or exert other effects.

The vulnerability of the mlxswspacltcaminit function in the drivers/net/ethernet/mellanox/mlxsw/spectrumacltcam.c file of the Mellanox network card driver for the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the function mlxsw_sp_acl_tcam_regionDestroy() in the driver network cards of Mellanox for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlxwspacltcamregiondestroy function in the drivers/net/ethernet/mellanox/mlxsw/spectrumacltcam.c file of the Mellanox network card driver for the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker t...

OESA-2024-1258 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth,...

OESA-2024-1257 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth,...

CVE-2024-25615

An unauthenticated Denial-of-Service DoS vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service...

CVE-2024-25615

An unauthenticated Denial-of-Service DoS vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service...

Denial of service

An unauthenticated Denial-of-Service DoS vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service...

CVE-2024-25615

An unauthenticated Denial-of-Service DoS vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service...

CVE-2024-25615

ArubaOS 8.x Spectrum service (via PAPI) is affected by a DoS vulnerability rooted in insufficient input validation. An unauthenticated remote attacker can interrupt normal operation of the Spectrum service. Exposed versions: ArubaOS 8.x. The cited PT-2024-2047 advisory recommends upgrading to a f...